Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54A0E9A4458811EEA7338C19C4F9AE02.roa
File:                     54A0E9A4458811EEA7338C19C4F9AE02.roa (raw, json)
Hash identifier:          sytwgcbY36+upKcynaJKAw9Wyvr+/qcclFb/MlXrmVg=
Subject key identifier:   EC:87:5C:E4:74:79:41:90:37:5B:75:B3:E7:72:48:D0:B3:48:DA:1A
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       27B6
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54A0E9A4458811EEA7338C19C4F9AE02.roa
Signing time:             Mon 28 Aug 2023 09:50:33 +0000
ROA not before:           Mon 28 Aug 2023 09:50:33 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     18978
IP address blocks:        122.254.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10166 (0x27b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Aug 28 09:50:33 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64ec6de9-9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:4f:ee:bc:a6:49:ff:b0:9d:15:5f:3e:df:
                    4d:5e:89:b0:4a:8e:5e:94:db:ce:4a:75:1d:f8:78:
                    a7:6d:ca:42:03:ae:1b:2e:15:16:68:17:cd:3d:25:
                    1b:3e:73:2b:ef:65:79:c7:fb:f9:29:fa:fa:f4:7e:
                    9f:32:74:28:6e:73:1b:e1:a0:d9:4d:ab:bf:7a:1b:
                    89:bb:e3:b5:4e:99:a5:f0:24:33:0a:db:35:ec:52:
                    fb:0e:0e:da:8b:11:83:27:fd:83:cc:07:1f:83:ae:
                    3d:3d:18:e7:1e:13:82:65:cb:c1:67:f7:b8:a9:ca:
                    f6:d9:46:5f:73:4e:3a:fa:36:9b:3a:15:9d:a6:e3:
                    63:67:81:0e:93:1b:94:64:e2:af:6b:68:3c:4e:78:
                    17:c4:8f:21:dc:4a:d0:6e:37:f1:fa:d5:92:5f:9e:
                    0d:a5:d1:2f:05:26:c4:1d:e6:27:28:27:ef:ec:77:
                    ad:83:66:00:4d:38:95:c2:35:93:86:a5:4c:a9:dd:
                    70:09:be:7c:13:5f:46:4c:b2:14:a7:64:5b:c1:a9:
                    f2:3e:71:8a:8a:ab:e2:2e:6f:37:5b:60:4d:89:2d:
                    0a:33:b2:ce:f4:fb:a4:29:04:d5:70:f0:8c:07:e9:
                    cb:6e:80:bc:32:a7:4a:19:62:c6:ed:28:92:1e:ea:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:5C:E4:74:79:41:90:37:5B:75:B3:E7:72:48:D0:B3:48:DA:1A
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54A0E9A4458811EEA7338C19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:12:79:d0:12:1f:bb:6c:d6:53:57:91:16:f9:ac:28:53:
         7f:90:60:89:a0:a2:2c:99:d1:f0:f3:3e:b2:90:78:08:8a:aa:
         19:73:d0:2f:22:84:1f:d2:ee:88:73:f3:c0:74:0d:a3:8e:72:
         c5:f7:c6:5b:f6:37:f7:c0:53:ce:46:fc:9b:e0:70:ad:6d:e7:
         f6:4b:7f:f7:25:5d:a1:be:7b:29:83:9a:0c:ed:e4:31:3d:96:
         45:b0:fd:3b:08:d2:4a:d5:82:43:9a:6b:87:50:b8:01:fd:6a:
         bc:36:31:4a:f7:21:35:72:6f:8f:ef:fb:20:2c:28:b0:d0:47:
         f6:12:b4:6b:f7:f7:d5:f5:43:64:cd:86:e2:f8:f1:d2:b4:54:
         49:d0:13:7a:7b:94:b5:ff:e6:d6:65:04:48:45:e3:00:3d:77:
         40:76:df:52:34:91:eb:af:c0:b1:f6:48:aa:88:c4:c8:c9:06:
         a6:24:67:9c:c2:ac:66:ac:bf:43:cc:f7:e0:36:06:db:3c:92:
         de:ce:c5:c6:2e:2b:e9:01:02:1e:83:82:89:59:46:6f:27:7a:
         9d:a1:5b:f4:1a:eb:4c:e2:12:ce:07:b9:e9:da:6e:04:75:37:
         28:c7:cb:a6:24:e6:12:10:3a:d8:bc:78:10:56:57:96:d0:30:
         af:58:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org